dhi.io/virt-controller
1.7-debian-fips-dev, 1.7-debian13-fips-dev, 1.7-fips-dev, 1.7.4-debian-fips-dev, 1.7.4-debian13-fips-dev, 1.7.4-fips-dev
sha256:95b23cac6a5bfab462a4fc417475261a79c0e0a5f0043318b991427a9abd927a
Manifest digest:sha256:f814f8c39ed2b1013f7ca264c35460d47c32641de75877c2629635c67be8d442
Size
56.62 MB
Last pushed
3 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/virt-controller:1.7-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/virt-controller:1.7-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/virt-controller@sha256:2481cc5e3f304bc76a99cc8948a339b0f6f198e6410c14df2c16454ed749000d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/virt-controller@sha256:8f9ae0a946abf7efe3d75609d6cbc2ca2c76e4073aa389d1253170a3913dd319 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/virt-controller@sha256:21d82977faf551836ab4bd7da1d769e9e945bef0202c91a4b9f91931ef3d1469 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/virt-controller@sha256:6dee69e6c224ac1516b4e6475acc6181a2225b0b6277235983919bbcfce2ea55 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/virt-controller@sha256:026d9a9d4fb9c69472ede2335c8bab11cfee4b8a9f809ee82e5da9d96851fc5a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/virt-controller@sha256:a7a248bb7a958e6ab48a6bbc058d8084eff8f8cbce2e16e0a1b32069a2b3407d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/virt-controller@sha256:47e3eb9eb2d463cd8e550c75421488450cb174d7f8bb4ec8f5e196c41a9851a5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/virt-controller@sha256:115e09fd56b38bbbb8638b8f989f640946b5df53aad86fcf54cace3a7682098d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/virt-controller@sha256:a5bbb99447af0b300d9e0206100ae05623bc4bd2dde0388471ffc533797a70dc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/virt-controller@sha256:50b6b803d64fb75158d144dd5c2f5a288edfdd6f7b95d2f7d354466aa2d393ad |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/virt-controller@sha256:f99961a2cc075ef8d48da91639a134c41c87ba1b0d077d7fceb9139641e95d0d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/virt-controller@sha256:eb85ac7a2c24d2d65c4aabda1d923c293058764c31734c45da54dbb2cd3265be |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/virt-controller@sha256:8ab81aba4f7d87447c909a43ba01a9ba6059edb7289dc0c98e591d7e18d73ba0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/virt-controller@sha256:7ec5372cbc8d062c7071c870d1b8d5e88644115e39faee3a76efb1c4eb70f61a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/virt-controller@sha256:8b68211c0ee495cfe98e5110cc1f2b15b52ec0796e84d67eb05bb235ac08236c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/virt-controller@sha256:f64b78a9783f0bc3b3461fd1ab3691c08f6c14a34193255e5ea47dc9c69ae715 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/virt-controller@sha256:d43cccfa08312d811e7867f700899979c0e32af2e17a94ec68ad460b41f4360b |